
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File: FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier: 9ELwvoLzZlzU7CKTCPQ5PnBvp1ez8snqICaQG+TuBwA=
Subject key identifier: 45:96:B7:90:4C:A5:4A:3E:4F:B6:4A:DD:4F:81:28:3C:EB:11:FE:6F
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial: 02AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number: 0295
Signing time: Sun 01 Mar 2026 02:26:04 +0000
Manifest this update: Sun 01 Mar 2026 02:26:04 +0000
Manifest next update: Sun 08 Mar 2026 02:26:04 +0000
Files and hashes: 1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: bmVBDXMEm/1s7BNAygt7vPvjnfaZ2Ep3kYzEkPbGPa8=)
2: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: +vXql9o+JG8jXikaEwvUdgbDzT28NGoMtEaj6InzCZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Validity
Not Before: Mar 1 02:26:04 2026 GMT
Not After : Mar 8 02:26:04 2026 GMT
Subject: CN=69a3a3bc-1b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:9d:a2:4a:5b:6e:71:11:f2:2c:04:16:2a:
86:95:77:4a:7b:a3:d0:1d:be:33:dc:3d:e1:e4:fc:
42:92:95:e9:f4:15:f0:d0:13:45:b5:06:d8:de:61:
19:a1:50:14:3f:d7:b3:92:b7:8e:01:56:99:a3:be:
63:6d:22:5f:6b:e5:95:ac:e9:1a:bc:ae:a9:84:f5:
bd:58:21:45:23:b1:7a:90:10:2f:a8:a3:a7:e4:29:
9d:28:7a:7b:79:a4:2b:77:0d:0b:a1:e8:64:7d:02:
54:fd:87:c8:63:f6:d4:46:c4:1e:7e:b0:98:4e:75:
b7:aa:13:72:55:30:46:4c:fb:db:54:0e:83:3c:86:
de:b8:66:c1:93:9b:dc:ec:c6:25:63:56:38:16:1f:
96:94:bb:df:cf:b7:5a:14:1e:b7:14:91:76:78:d1:
ca:db:08:93:0f:29:ad:d9:42:6c:82:97:e4:bf:74:
2e:12:40:1b:c5:aa:b0:c5:d5:b8:02:c8:d2:15:cb:
39:5c:a9:80:29:dd:69:aa:56:7f:29:12:21:dd:9f:
ef:a5:f5:78:8f:a9:29:1b:9c:ad:92:66:b0:3f:2e:
de:03:5d:6c:81:9a:30:ad:73:cd:74:8b:e9:8b:a8:
04:bc:31:a0:52:31:f3:35:22:67:16:e9:8f:e7:4c:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:96:B7:90:4C:A5:4A:3E:4F:B6:4A:DD:4F:81:28:3C:EB:11:FE:6F
X509v3 Authority Key Identifier:
keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:53:44:f3:30:c1:c1:5d:62:fc:c2:85:82:89:2e:f8:ed:92:
d6:56:b2:ba:88:9a:94:5b:c8:4f:f5:e2:fe:99:6b:e2:a8:50:
f6:58:c3:5e:2f:8a:55:6e:1b:38:70:20:d8:ae:c8:9c:47:0a:
fd:cb:08:c2:3d:3d:f7:6f:83:0a:13:a3:e9:09:70:f1:5e:7a:
00:33:27:37:ad:8a:cb:79:cf:fd:4d:74:fc:b5:ca:72:75:fe:
77:60:22:99:e9:e1:d5:28:31:b6:83:2a:f2:ff:c5:a5:b5:6c:
57:9b:89:1a:06:75:8b:c6:24:d0:06:a2:f3:d8:fc:78:bb:5f:
0f:53:9f:47:24:aa:d2:28:d6:a1:89:a5:a8:00:71:f5:3a:da:
dd:59:1f:d4:31:73:72:76:39:eb:e8:35:a4:d3:50:e0:4c:21:
9c:4e:18:6c:ff:12:68:59:7f:4d:67:5d:16:c3:78:2c:07:02:
d9:4a:39:ac:82:78:fe:de:8c:93:36:51:ac:d8:1a:1f:4a:84:
8d:1f:f0:dd:f5:21:06:17:b0:01:8f:c2:f4:b0:96:ad:8d:ef:
26:d1:0e:f5:35:8f:60:0d:69:cb:6a:5c:59:ee:85:fc:26:d1:
1f:00:65:1f:f4:a8:62:c2:c0:af:4e:43:57:3d:b1:6b:94:2f:
80:0c:94:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA4RUUxMTAvBgNVBAUTKDE1OEI5NjY2NEZCMUM5QUVFRUIzRDI4NzA3Rjg3N0ZF
MjM3QjAyREMwHhcNMjYwMzAxMDIyNjA0WhcNMjYwMzA4MDIyNjA0WjAYMRYwFAYD
VQQDDA02OWEzYTNiYy0xYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdWdokpbbnER8iwEFiqGlXdKe6PQHb4z3D3h5PxCkpXp9BXw0BNFtQbY3mEZ
oVAUP9ezkreOAVaZo75jbSJfa+WVrOkavK6phPW9WCFFI7F6kBAvqKOn5CmdKHp7
eaQrdw0LoehkfQJU/YfIY/bURsQefrCYTnW3qhNyVTBGTPvbVA6DPIbeuGbBk5vc
7MYlY1Y4Fh+WlLvfz7daFB63FJF2eNHK2wiTDymt2UJsgpfkv3QuEkAbxaqwxdW4
AsjSFcs5XKmAKd1pqlZ/KRIh3Z/vpfV4j6kpG5ytkmawPy7eA11sgZowrXPNdIvp
i6gEvDGgUjHzNSJnFumP50zedwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWWt5BM
pUo+T7ZK3U+BKDzrEf5vMB8GA1UdIwQYMBaAFBWLlmZPscmu7rPShwf4d/4jewLc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhFRS81M0M2NzhENjQz
MDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlhN3VzOUtIQl9oM19pTjdB
dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZZdVdaay14eWE3dXM5S0hCX2gzX2lON0F0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDhFRS81M0M2NzhENjQzMDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlh
N3VzOUtIQl9oM19pTjdBdHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAblNE8zDBwV1i/MKFgoku+O2S1layuoialFvIT/Xi/plr4qhQ9ljDXi+KVW4b
OHAg2K7InEcK/csIwj0992+DChOj6Qlw8V56ADMnN62Ky3nP/U10/LXKcnX+d2Ai
menh1SgxtoMq8v/FpbVsV5uJGgZ1i8Yk0Aai89j8eLtfD1OfRySq0ijWoYmlqABx
9Tra3Vkf1DFzcnY56+g1pNNQ4EwhnE4YbP8SaFl/TWddFsN4LAcC2Uo5rIJ4/t6M
kzZRrNgaH0qEjR/w3fUhBhewAY/C9LCWrY3vJtEO9TWPYA1py2pcWe6F/CbRHwBl
H/SoYsLAr05DVz2xa5QvgAyUBQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:59 2026 by rpki-client